This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
File:                     B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft (raw, json)
Hash identifier:          oyvBMRTPeTigKxxFITue3gITqL+MMbwsp38h8if7ePA=
Subject key identifier:   59:CE:52:99:0B:61:5B:00:D0:1A:0C:10:0E:21:FA:C9:DB:42:6E:70
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       50332AAFB8BB2A736875025570B4E9F6B8BF59D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
Manifest number:          67
Signing time:             Mon 22 Dec 2025 22:53:32 +0000
Manifest this update:     Mon 22 Dec 2025 22:48:32 +0000
Manifest next update:     Sat 27 Dec 2025 08:43:32 +0000
Files and hashes:         1: 3137302e3235342e312e302f32342d3234203d3e20323639393830.roa (hash: 43QsRslbnOnwz5eucThnScAyAORAVUvwdtIkI+tGO8Y=)
                          2: 3133382e3131372e34302e302f32342d3234203d3e20323734303539.roa (hash: 1fg9WcU/Jedkgs4XBaH7wGzBKkVfoMc7CwQY/ldz4vo=)
                          3: 3137302e3235342e302e302f32342d3234203d3e20323733383938.roa (hash: tszXPe25GBxu/9UDfFXI4a21YVCnnv5vf5oBOy24eSk=)
                          4: 3137302e3235342e332e39362f32382d3238203d3e20323639393830.roa (hash: WlRznIORdFShQYkf5S1DmAhXGnNEwYv4Ur9lgZJZqkE=)
                          5: 323830333a316135303a3a2f33322d3332203d3e20323734303539.roa (hash: +5hEJnv3LlWVRW1jgv8VJfTNK2KIsgBlLStECWZoqqA=)
                          6: 3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa (hash: E5LqNaN3vz2pDbnV2zQffecdaqEFCwiCwo6Rk9fPoUw=)
                          7: 3137302e3235342e332e3131322f32392d3239203d3e20323639393830.roa (hash: ZEkJRxoqd65DNhbD8iHAu1q3nHdxRkzM2dbKVV6QqNw=)
                          8: 3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa (hash: Yt36B7paDtRu4f6ICSs4KBJtd8+g3vYrJ7uxpyvXZbs=)
                          9: 3137302e3235342e322e302f32332d3234203d3e20323639393830.roa (hash: CItMQH29ECgQCakcJvSYI5xDtTvSW3JNHbBhHKOGzZ4=)
                          10: B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl (hash: Dyty4kVYQJ6Vbo5NS9CM5LtvHngbF/j4GJePlai4+Ww=)
                          11: 3133382e3131372e34322e302f32332d3234203d3e20323734303539.roa (hash: 5NbMty3rb/0kxmLUaFUP9zXtnDKQW/EO7TOhXwxs1Pw=)
                          12: 3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa (hash: YCi00WPXCoH+LgxMFocBT7un54JV2nliIXmT+l48sxk=)
                          13: 3137302e3235342e322e302f32332d3234203d3e20323734303539.roa (hash: qUb/yWjXfgl9aLRFz1Oj45WF1kRlpKNJdDCUvAIh/2I=)
                          14: 323830333a316135303a3a2f33322d3332203d3e20323639393830.roa (hash: yjxjeOB1Q5ACKTd4vciwlK8fAjFY+aglQpK8KDxgyfY=)
                          15: 3137302e3235342e312e302f32342d3234203d3e20323734303539.roa (hash: iCSSstV3y0sfeND3UAb+o8W8ldyLzkJmefSj70zqlFY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 08:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:2a:af:b8:bb:2a:73:68:75:02:55:70:b4:e9:f6:b8:bf:59:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Dec 22 22:48:32 2025 GMT
            Not After : Dec 27 08:43:32 2025 GMT
        Subject: CN=59CE52990B615B00D01A0C100E21FAC9DB426E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:68:51:00:ff:3a:6c:c2:bc:69:52:3e:26:
                    fd:95:c1:e9:63:d2:82:6b:7b:92:34:ec:19:f7:a3:
                    6c:8a:c4:b8:84:45:b0:56:88:2a:f0:b0:df:12:8f:
                    13:6f:47:b1:44:e6:34:3a:62:bd:02:ce:c2:3a:3d:
                    cf:07:a8:69:2f:e6:1b:09:eb:99:c9:74:c2:dc:b2:
                    bc:a9:e5:07:5d:b9:74:cf:fe:f3:44:16:d7:41:12:
                    de:57:51:8a:c4:fa:0f:31:79:cf:42:d9:eb:40:0c:
                    16:9c:85:d7:4b:c2:f1:d9:e7:f8:2a:18:14:92:95:
                    29:2d:26:5d:2b:3c:26:60:25:ec:c2:4f:8b:0b:45:
                    77:a1:88:18:5d:8e:aa:9f:7d:be:c6:02:6b:b3:cc:
                    34:c7:6c:03:fa:3c:50:42:88:ea:11:18:a4:84:50:
                    4b:d7:bd:e0:d3:2b:be:f7:39:53:e2:e5:e5:21:8a:
                    1d:e8:f2:47:7e:88:a4:aa:a9:e2:8a:b7:e5:eb:36:
                    3a:7c:a1:42:d8:b4:20:9e:43:cc:9f:41:47:d6:42:
                    4a:d6:42:df:2b:f0:60:48:a3:a7:2c:8b:c9:ba:11:
                    16:1c:ae:20:dd:08:c6:41:fd:7b:cc:55:36:af:42:
                    cc:59:00:fd:9b:1a:19:05:73:89:64:11:24:63:38:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:52:99:0B:61:5B:00:D0:1A:0C:10:0E:21:FA:C9:DB:42:6E:70
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8e:43:09:cb:6f:e2:02:f8:df:d9:d5:04:ae:3a:68:78:e5:
         ec:6a:28:81:23:cd:f8:ac:07:65:9a:a8:95:55:a4:11:f5:d9:
         c7:ac:6d:5b:98:ae:cc:57:20:7c:da:88:09:6a:0d:c3:13:a4:
         e9:ea:c4:30:c5:d4:e1:b0:ae:e1:4b:19:3a:3c:a1:9a:2b:b8:
         11:ab:36:6c:24:e3:55:83:a5:d9:60:fb:e3:2e:15:66:58:ec:
         15:a0:64:ae:bb:15:85:92:dc:32:37:3e:53:d3:e1:12:91:db:
         40:53:ea:48:21:8c:ae:85:7f:c0:1f:b1:ae:9f:9c:fe:71:e8:
         f8:d9:45:9c:6b:78:a0:d3:e2:b5:04:65:83:ca:7f:27:4c:27:
         d8:14:e6:61:2b:b1:4a:10:d4:a7:77:0d:06:62:f9:5b:6f:c9:
         39:d5:05:1d:5b:c7:e6:c4:ca:4b:24:30:28:20:22:03:88:c8:
         44:79:97:51:12:e6:5b:ed:39:e0:81:99:83:2c:72:16:32:4b:
         1a:50:84:b4:4b:51:de:3f:ab:00:4d:2c:ec:90:19:0e:f7:93:
         56:a3:33:e2:ee:19:8d:b5:e7:56:8f:6f:ee:09:97:0e:90:92:
         fd:02:51:28:8a:22:51:90:34:49:b7:08:fe:f7:74:79:8f:f4:
         e9:6a:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:46:37 2025 by rpki-client